CVE-2016-3843

Summary

Android before 2016-08-05 does not properly restrict code execution in a kernel context, which allows attackers to gain privileges via a crafted application, as demonstrated by the kernel performance subsystem and the Qualcomm performance component, aka Android internal bugs 28086229 and 29119870 and Qualcomm internal bug CR1011071.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://source.android.com/security/bulletin/2016-08-01.html
• http://www.securityfocus.com/bid/92237
• http://www.securityfocus.com/bid/92250

References

• http://source.android.com/security/bulletin/2016-08-01.html
• http://www.securityfocus.com/bid/92237
• http://www.securityfocus.com/bid/92250

• ←Previous
• Next→